03-13-2013 10:31 AM
Hi, I'm new to IAP but not new to RADIUS or controller based access. I'm setting up my IAP for the first time, I'm seeing ICMP dest unreachable for IAP(v184.108.40.206-220.127.116.11_37229) requests on UDP/1812 coming back from CP (v18.104.22.168003). I have 15 controllers connecting to the same CP servers with no issues. I've sniffed in front of the IAP and have run a dump on CP. Both show the original radius request and a corresponding ICMP dest unreachable.
Strange since in the CP dump there are RADIUS requests before and after the IAP requests on 1812 that are serviced normally. I've confirmed that I've created the NAS device correctly in CP. If the NAS was set up incorrectly I would see a bad/unknown NAS entry in CP Access Tracker. These requests are not making that high up the OSI stack even.
Has anyone seen behaviour like this before? Suggestions welcome.
Solved! Go to Solution.
03-13-2013 11:16 AM
Did you setup dynamic radius proxy on IAP?
Aruba Customer Engineering
Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base
03-13-2013 01:13 PM
I figured out what the problem is (between the chair and keyboard).
I was pointing IAP at the management interface of my CP server instead of the data interface.